Caleb Doxsey
9413123c0f
config: generate cookie secret if not set in all-in-one mode ( #3742 )
...
* config: generate cookie secret if not set in all-in-one mode
* fix tests
* config: add warning about cookie_secret
* breakup lines
2022-11-11 14:14:30 -07:00
Caleb Doxsey
2c9087f5e7
config: disable Strict-Transport-Security when using a self-signed certificate ( #3743 )
2022-11-10 16:01:06 -07:00
Denis Mishin
01445a8c00
bump Envoy to 1.23.2 ( #3739 )
2022-11-09 22:23:17 -05:00
Caleb Doxsey
4d10d36509
controlplane: fix /.well-known/pomerium missing CORS headers ( #3738 )
2022-11-09 12:08:28 -07:00
Caleb Doxsey
2b319822a4
authenticate: update user info dashboard to show group info for enterprise ( #3736 )
...
* authenticate: update user info dashboard to show group info for enterprise
* Update ui/src/components/GroupDetails.tsx
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
Co-authored-by: bobby <1544881+desimone@users.noreply.github.com>
2022-11-09 07:44:35 -07:00
Eng Zer Jun
45ce6f693a
test: use T.TempDir to create temporary test directory ( #3725 )
...
Prior to this commit, temporary directories in tests were created using
`filepath.Join` and `os.MkdirAll`.
This commit replaces `os.MkdirAll` with `t.TempDir` in tests. The
directory created by `t.TempDir` is automatically removed when the test
and all its subtests complete.
Reference: https://pkg.go.dev/testing#T.TempDir
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2022-11-08 09:16:32 -07:00
Caleb Doxsey
e1f881f82b
authorize: fix user caching ( #3734 )
2022-11-08 08:23:41 -07:00
dependabot[bot]
20d4a7520e
chore(deps): bump golang from 1.19.2-buster to 1.19.3-buster ( #3733 )
2022-11-08 08:49:53 -05:00
dependabot[bot]
786c3b9f90
chore(deps): bump go.opencensus.io from 0.23.0 to 0.24.0 ( #3727 )
...
Bumps [go.opencensus.io](https://github.com/census-instrumentation/opencensus-go ) from 0.23.0 to 0.24.0.
- [Release notes](https://github.com/census-instrumentation/opencensus-go/releases )
- [Commits](https://github.com/census-instrumentation/opencensus-go/compare/v0.23.0...v0.24.0 )
---
updated-dependencies:
- dependency-name: go.opencensus.io
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 14:36:35 -05:00
dependabot[bot]
2f47a983ee
chore(deps): bump github.com/envoyproxy/protoc-gen-validate from 0.6.13 to 0.8.0 ( #3731 )
...
chore(deps): bump github.com/envoyproxy/protoc-gen-validate
Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate ) from 0.6.13 to 0.8.0.
- [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases )
- [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml )
- [Commits](https://github.com/envoyproxy/protoc-gen-validate/compare/v0.6.13...v0.8.0 )
---
updated-dependencies:
- dependency-name: github.com/envoyproxy/protoc-gen-validate
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 11:58:40 -05:00
dependabot[bot]
a8722cfb4a
chore(deps): bump github.com/spf13/viper from 1.13.0 to 1.14.0 ( #3728 )
...
Bumps [github.com/spf13/viper](https://github.com/spf13/viper ) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/spf13/viper/releases )
- [Commits](https://github.com/spf13/viper/compare/v1.13.0...v1.14.0 )
---
updated-dependencies:
- dependency-name: github.com/spf13/viper
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 11:57:46 -05:00
dependabot[bot]
38e4b860b9
chore(deps): bump github.com/open-policy-agent/opa from 0.45.0 to 0.46.1 ( #3729 )
...
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ) from 0.45.0 to 0.46.1.
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.45.0...v0.46.1 )
---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 11:57:10 -05:00
dependabot[bot]
39f7c42928
chore(deps): bump distroless/base from 856944e to cd1bf87 ( #3732 )
...
Bumps distroless/base from `856944e` to `cd1bf87`.
---
updated-dependencies:
- dependency-name: distroless/base
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 11:56:20 -05:00
dependabot[bot]
ed2481aa5f
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.15.3 to 4.15.4 ( #3726 )
...
chore(deps): bump stefanzweifel/git-auto-commit-action
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action ) from 4.15.3 to 4.15.4.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases )
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md )
- [Commits](0049e3fa40...0b007fbd11
2022-11-07 11:54:38 -05:00
Denis Mishin
74a7daed4f
add config option check logging ( #3722 )
2022-11-05 00:25:09 -04:00
Caleb Doxsey
02df20f10a
authorize: performance improvements ( #3723 )
2022-11-04 17:09:52 -06:00
Denis Mishin
a3cfe8fa42
keep trace span context ( #3724 )
2022-11-04 17:52:13 -04:00
Caleb Doxsey
c178819875
move directory providers ( #3633 )
...
* remove directory providers and support for groups
* idp: remove directory providers
* better error messages
* fix errors
* restore postgres
* fix test
2022-11-03 11:33:56 -06:00
dependabot[bot]
bb5c80bae9
chore(deps): bump google.golang.org/api from 0.100.0 to 0.101.0 ( #3714 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.100.0 to 0.101.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.100.0...v0.101.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-02 07:39:50 -06:00
dependabot[bot]
7b6880cfd0
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.15.2 to 4.15.3 ( #3716 )
...
chore(deps): bump stefanzweifel/git-auto-commit-action
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action ) from 4.15.2 to 4.15.3.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases )
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md )
- [Commits](2fde6fc18d...0049e3fa40
2022-11-02 07:39:30 -06:00
dependabot[bot]
e3ab2dd81a
chore(deps): bump golang from 403f389 to b448089 ( #3718 )
...
Bumps golang from `403f389` to `b448089`.
---
updated-dependencies:
- dependency-name: golang
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-02 07:39:13 -06:00
dependabot[bot]
372a7477c0
chore(deps): bump github.com/google/go-jsonnet from 0.18.0 to 0.19.1 ( #3715 )
...
Bumps [github.com/google/go-jsonnet](https://github.com/google/go-jsonnet ) from 0.18.0 to 0.19.1.
- [Release notes](https://github.com/google/go-jsonnet/releases )
- [Changelog](https://github.com/google/go-jsonnet/blob/master/.goreleaser.yml )
- [Commits](https://github.com/google/go-jsonnet/compare/v0.18.0...v0.19.1 )
---
updated-dependencies:
- dependency-name: github.com/google/go-jsonnet
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-02 07:38:47 -06:00
dependabot[bot]
42b4a197e3
chore(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 ( #3713 )
...
Bumps [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify ) from 1.5.4 to 1.6.0.
- [Release notes](https://github.com/fsnotify/fsnotify/releases )
- [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fsnotify/fsnotify/compare/v1.5.4...v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/fsnotify/fsnotify
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-02 07:37:58 -06:00
dependabot[bot]
8a05c6e4f1
chore(deps): bump github.com/docker/docker from 20.10.20+incompatible to 20.10.21+incompatible ( #3712 )
...
chore(deps): bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 20.10.20+incompatible to 20.10.21+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Changelog](https://github.com/moby/moby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/docker/docker/compare/v20.10.20...v20.10.21 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-02 07:37:32 -06:00
dependabot[bot]
f4f1e29484
chore(deps): bump debian from 1b1d158 to 9583740 ( #3719 )
...
Bumps debian from `1b1d158` to `9583740`.
---
updated-dependencies:
- dependency-name: debian
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-01 11:20:03 -04:00
dependabot[bot]
4cb2e9e005
chore(deps): bump mikefarah/yq from 4.28.2 to 4.29.2 ( #3717 )
...
Bumps [mikefarah/yq](https://github.com/mikefarah/yq ) from 4.28.2 to 4.29.2.
- [Release notes](https://github.com/mikefarah/yq/releases )
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt )
- [Commits](1f0881fb5f...5e490527de
2022-10-31 12:26:39 -04:00
Denis Mishin
d8f4355f66
fix unused key warnings in routes ( #3711 )
2022-10-28 14:59:43 -04:00
Caleb Doxsey
3f9dfbef76
device: add generic methods for working with user+session devices ( #3710 )
2022-10-28 08:41:12 -06:00
Caleb Doxsey
6a9d6e45e1
config: allow blank identity providers when loading sessions for service account support ( #3709 )
2022-10-27 08:32:06 -06:00
Caleb Doxsey
1b596115e9
postgres: increase record batch size ( #3708 )
2022-10-26 07:40:13 -06:00
Caleb Doxsey
30bdae3d9e
sessions: check idp id to detect provider changes to force session invalidation ( #3707 )
...
* sessions: check idp id to detect provider changes to force session invalidation
* remove dead code
* fix test
2022-10-25 16:20:32 -06:00
Caleb Doxsey
3f7a482815
envoyconfig: fix databroker health checks ( #3706 )
2022-10-25 12:37:46 -06:00
Caleb Doxsey
b68dc1ff4f
controlplane: move jwks.json endpoint to control plane ( #3691 )
2022-10-25 08:01:33 -06:00
Caleb Doxsey
63b210e51d
httputil: remove error details ( #3703 )
2022-10-25 08:00:21 -06:00
dependabot[bot]
9482dba049
chore(deps): bump github.com/golangci/golangci-lint from 1.50.0 to 1.50.1 ( #3697 )
...
chore(deps): bump github.com/golangci/golangci-lint
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint ) from 1.50.0 to 1.50.1.
- [Release notes](https://github.com/golangci/golangci-lint/releases )
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md )
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.50.0...v1.50.1 )
---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 14:49:58 -06:00
dependabot[bot]
c504589a3b
chore(deps): bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 ( #3696 )
...
Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model ) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/prometheus/client_model/releases )
- [Commits](https://github.com/prometheus/client_model/compare/v0.2.0...v0.3.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 14:49:32 -06:00
dependabot[bot]
31c1677a35
chore(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 ( #3698 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](3cea537223...83fd05a356
2022-10-24 14:48:45 -06:00
dependabot[bot]
935507fd54
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.15.1 to 4.15.2 ( #3699 )
...
chore(deps): bump stefanzweifel/git-auto-commit-action
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action ) from 4.15.1 to 4.15.2.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases )
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md )
- [Commits](fd157da78f...2fde6fc18d
2022-10-24 14:48:24 -06:00
dependabot[bot]
d84df2cca7
chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 ( #3695 )
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.8.0...v1.8.1 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 14:48:04 -06:00
dependabot[bot]
aaf3546246
chore(deps): bump github.com/docker/docker from 20.10.19+incompatible to 20.10.20+incompatible ( #3694 )
...
chore(deps): bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 20.10.19+incompatible to 20.10.20+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Changelog](https://github.com/moby/moby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/docker/docker/compare/v20.10.19...v20.10.20 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 14:47:47 -06:00
dependabot[bot]
ec1ce7927e
chore(deps): bump google.golang.org/api from 0.99.0 to 0.100.0 ( #3693 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.99.0 to 0.100.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.99.0...v0.100.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 14:47:30 -06:00
dependabot[bot]
0dbe410982
chore(deps): bump actions/download-artifact from 3.0.0 to 3.0.1 ( #3700 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fb598a63ae...9782bd6a98
2022-10-24 14:47:16 -06:00
dependabot[bot]
93f21d7cd2
chore(deps): bump distroless/base from 9681f07 to 856944e ( #3702 )
...
Bumps distroless/base from `9681f07` to `856944e`.
---
updated-dependencies:
- dependency-name: distroless/base
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-24 14:46:53 -06:00
dependabot[bot]
9e23775224
chore(deps): bump mikefarah/yq from 4.28.1 to 4.28.2 ( #3690 )
...
Bumps [mikefarah/yq](https://github.com/mikefarah/yq ) from 4.28.1 to 4.28.2.
- [Release notes](https://github.com/mikefarah/yq/releases )
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt )
- [Commits](ffe635f943...1f0881fb5f
2022-10-20 13:50:43 -06:00
Caleb Doxsey
71734a7820
upgrade go to 1.19.2 ( #3689 )
...
upgrade go
2022-10-20 12:18:19 -06:00
Caleb Doxsey
75634dfca2
authenticate: remove ecjson ( #3688 )
2022-10-20 10:37:21 -06:00
Caleb Doxsey
61506c11b5
lint: remove deprecated linters ( #3686 )
2022-10-19 13:52:03 -06:00
dependabot[bot]
ec495bb682
chore(deps): bump github.com/golangci/golangci-lint from 1.48.0 to 1.50.0 ( #3667 )
...
* chore(deps): bump github.com/golangci/golangci-lint
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint ) from 1.48.0 to 1.50.0.
- [Release notes](https://github.com/golangci/golangci-lint/releases )
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md )
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0 )
---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* lint
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2022-10-19 09:36:59 -06:00
Caleb Doxsey
d147846e64
fileutil: update watcher to use fsnotify and polling ( #3663 )
...
* fileutil: update watcher to use fsnotify and polling
* raise timeout
* maybe fix
2022-10-19 09:13:08 -06:00
Caleb Doxsey
daed2d260c
config: disable envoy admin by default, expose stats via envoy route ( #3677 )
2022-10-18 16:25:03 -06:00
